CVE-2021-3642
CVE-2021-3642
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.8%KEV nãoPoC —Patch —
Lifecycle
05 Aug 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.
Affected products
n/a · wildfly-elytronWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →